Extracted

• • Target

    INQ-985346.exe

  • Size

    199KB

  • MD5

    40e702eaa9702c15ec7a56dbabb1c11d

  • SHA1

    02759ef192241650b9a46dbc0ed417103fd0ea42

  • SHA256

    e092e65f8deb9ad553bfd53c0d46608c6f41850f0b5398e87a6a68dab7fd3bbb

  • SHA512

    1673247f354d3bbea422374db61178de80b34f0c4949972cf35050e013b7ef393043c6bafcfdc968b53389b401e82c0281d390c43e3123dc26955ceb33b40b7b

  • SSDEEP

    3072:lMP7eRyM+kMLdTx67/XOY4zFrdUibCewEsMqfk1ZOobfxAsXDq9m:lMPSd+DLaDwNd7enMqWBpW

  Score

  10^/10

  warzoneratdiscoveryinfostealerrat

  • WarzoneRat, AveMaria

    WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

    ratinfostealerwarzonerat

  • Warzonerat family

    warzonerat

  • Warzone RAT payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2